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Listing of Claims 

1.-23. (Cancelled). 

24. (Previously Presented) A terminal unit comprising: 
a memory in communication with a processor; and 
the processor configured to: 

communicate with a wireless network portion of a transmission system; 

transmit, via the wireless network, a first transmission request in order to 
receive an application descriptive file from an information provider server in the 
transmission system based on a storage location of the application descriptive file in 
the transmission system; 

store the application descriptive file in the memory after receipt of the 
application descriptive file, 

wherein the application descriptive file includes a storage location for 

application software in the transmission system and a storage location of a 

security descriptive file in the transmission system; 

transmit a second transmission request, via the wireless network, comprising 
the storage location of the security descriptive file stored in the application descriptive 
file in order to receive the security descriptive file associated with the application 
software; 

in response to receipt of the security descriptive file, store the security 
descriptive file associated with the application software, wherein the security 
descriptive file includes authorization information associated with the application 
software, and wherein the authorization information includes an authorization to 
execute the application software on the processor of the terminal unit; 

transmit a third transmission request to receive the application software based 
upon the storage location for application software stored in the application descriptive 
file; 



2 



Application No. 10/509,545 

Response to Restriction/Election Requirement of December 12, 2008 

restrict operation of the application software on the processor of the terminal 
unit in accordance with the authorization information contained in the security 
descriptive file. 

25. (Previously Presented) The terminal unit of claim 24, wherein at least a portion of the 
security descriptive file received by the terminal unit is encrypted; and 

wherein the processor is fijrther configured to decrypt the security descriptive file. 

26. (Previously Presented) The terminal unit of claim 24, wherein the storage location of 
the security descriptive file is stored on an administration server corresponding to a storage 
location within a network; 

wherein a communication path between the administration server and the terminal 
unit is fully contained within the network administered by a communication provider of the 
wireless network. 

27. (Previously Presented) The terminal unit of claim 24, 

wherein the application descriptive file includes a public key of a communication 
provider that provides communication service to the terminal unit; 

wherein the security descriptive file is signed by a secret key of the communication 
provider; and 

wherein the processor is further configured to: 

determine authenticity of the security descriptive file received in response to 

the second transmission request based upon the public key of the communication 

provider included in the application descriptive file; and 

transmit a fourth transmission request, via the wireless network, to receive the 

application software based upon the storage location of the application software in 

response to determination of the authenticity of the security descriptive file. 
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28. (Previously Presented) The terminal unit of claim 24, wherein the application 
descriptive file includes a first application identifier and the security descriptive file includes 
a second application identifier; and 

wherein the processor further configured to: 

compare the first application identifier of the application descriptive file to the 
second application identifier of the security descriptive file; and 

transmit the third transmission request to receive the application software only 
when the first identifier matches the second identifier. 

29. (Previously Presented) The terminal unit of claim 24, wherein the processor is further 
configured to: 

determine whether the storage location of the security descriptive file included 
in the application descriptive file is in an administration server permitted to provide 
the security descriptive file; and 

transmit the second transmission request to receive the security descriptive file 
based upon the determination that the storage location of the security descriptive file 
included in the application descriptive file is in the administration server permitted to 
provide the security descriptive file. 

30. (Previously Presented) The termmal of claim 29, wherein a communication path 
between the administration server authorized to provide the security descriptive file and the 
terminal unit is physically secured within a network of a communication provider of the 

wireless network. 

3 1 . (Previously Presented) The terminal unit of claim 24, wherein the security descriptive 
file includes time limit information that indicates an expiration date of the application 

software associated with the security descriptive file; and 
wherein the processor further configured to: 
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determine whether authorization to execute the application software on the 
terminal unit has expired based upon the time limit information of the security 

descriptive file; 

request transmission of an updated security descriptive file fi^om the 
transmission system based upon determination that the authorization to execute the 
application software on the terminal has expired; 

receive the updated security descriptive file from the transmission system; and 
renew the expiration date of the application software based upon an updated 
expiration date included in the updated security descriptive file. 

32. (Previously Presented) The terminal unit of claim 3 1 , 

wherein the terminal unit renews the expiration date of the application software only 
when the updated security descriptive file is received firom the storage location of the 
security descriptive file included in the application descriptive file. 

3 3 . (Previously Presented) A transmission system comprising: 

an application software program executable on a mobile terminal, wherein the 
application software program is stored at a first storage location accessible with the 
transmission system; 

a security descriptive file stored at a second storage location accessible with the 
transmission system, wherein the security descriptive file includes authorization information 
for the mobile terminal to execute the application software program; 

an application descriptive file stored at a third storage location accessible with the 
transmission system, wherein the application descriptive file includes a first address for the 
first storage location accessible with the transmission system and a second address for the 
second storage location accessible vvith the transmission system; and 

an administration server configured to administer access to the security descriptive 
file, wherein the administration server unit is configured to transmit the security descriptive 
file to the mobile terminal in response to a request for the security descriptive file as a 
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function of the second address for the second storage location accessible with the 
transmission system. 

34. (Previously Presented) The transmission system of claim 33, further comprising: 
an information provider server accessible with the transmission system, wherein the 

information provider server is configured to administer access to the application descriptive 

file; 

wherein the information provider server is further configured to transmit the 
application descriptive file to the mobile terminal in response to a request for the application 
descriptive file from the mobile terminal; and 

wherein the request for the application descriptive file is a function of the third 
storage location accessible with the transmission system. 

35. (Previously Presented) The transmission system of claim 34, wherein the information 
provider server is further configured to administer access to the application software program 
executable on the mobile terminal; 

wherein the information provider server is further configured to transmit the 
application software program to the mobile terminal in response to a request for the 
application software program from the mobile terminal; and 

wherein the request for the application software program is a function of the first 
address for the first storage location accessible with the fransmission system contained in the 
application descriptive file. 

36. (Previously Presented) The transmission system of claim 34, wherein a second 
information provider server is configured to administer access to the application software 
program executable on the mobile terminal; 

wherein the information provider server is further configured to transmit the 
application software program to the mobile terminal in response to a request for the 
application software program from the mobile terminal; and 
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wherein the request for the application software program is a function of the first 
address for the first storage location accessible with the transmission system contained in the 
application descriptive file; 

the administration server configured to receive a request from the terminal unit for the 
validity information of the security descriptive file; and 

in response to the request for the validity information of the security descriptive file, 
the administration server further configured to send the validity information of the security 
descriptive file to the terminal unit, wherein the sent validity information provides an 
indication of the extendibility of the expiration date. 

37. (Previously Presented) An administration server unit in a transmission system 
comprising: 

the memory including a security descriptive file, wherein the security descriptive file 
includes authorization information for an application software to execute on a terminal unit, 
an expiration date associated with the authorization information, and validity information 
associated with the security descriptive file, wherein the authorization information includes 
an authorization to execute the application software on the terminal unit until the expiration 
date associated with the authorization information; and 

a processor in communication with the memory, the processor configured to: 
communicate with a terminal unit through the transmission system; 
receive a request from the terminal unit for the validity information the 
security descriptive file via the communication unit; and 

in response to the request the validity information of the security descriptive 
file, send the validity information of the security descriptive file to the terminal unit, 
wherein the sent validity information provides an indication of the extendibility of the 
expiration date. 

38. (Previously Presented) The administration server unit of claim 37, wherein the 
processor is further configured to: 
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determine whether the expiration date of the security descriptive file is extendible 
based upon the indication of the extendibility of the expiration date; and 

send an updated security descriptive file to the terminal unit based upon determination 
that the expiration date of the security descriptive file is extendible. 

39. (Previously Presented) The administration server unit of claim 3 8, wherein the 
updated security descriptive file further includes a first application program identifier the 
application descriptive file includes a second application identifier; 

wherein the terminal unit is configured to determine whether the first application 
program identifier matches and the second application program identifier; and 

wherein the updated security description file is invalid for use by the terminal unit 
based upon determination that the first program identifier fails to match the second program 
identifier. /- 

40. (Withdrawn) A terminal unit comprising: 
a memory; and 

a processor in communication with the memory, wherein the processor is configured 
to execute computer executable instructions stored in the memory; 

computer instructions stored in the memory, the computer instructions executable to 
receive a security descriptive file fi-om an administration server unit, wherein the security 
descriptive file includes authorization information associated with an application software, 
and wherein the authorization information includes an authorization to execute the 
application software on the terminal unit; 

computer instructions stored in liie memory, the computer instructions executable to 
store the security descriptive file in the memory, wherein the security descriptive file 
includes expiration date information; 

computer instructions stored in the memory, the computer instructions executable to 
transmit to the administration server unit by the communication unit a request for an update 
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of the authorization information for the security descriptive file stored in the memory based 
upon the expiration date information included in the security descriptive file; and 

computer instructions stored in the memory, the computer instructions executable to 
permit execution of the application software that corresponds to the security descriptive file 
based upon the updated authorization information received from the administration server. 

41 . (Withdrawn) The terminal unit of claim 40 further comprising: 

computer instructions stored in the memory, the computer instructions executable to 
disable activation of the application software that corresponds to the security descriptive file 
in response to receipt of the updated authorization indication that provides an indication that 
the authorization to execute application software on the terminal unit is void. 

42. (Withdrawn) The terminal unit of claim 40 fiirther comprising: 

computer instructions stored in the memory, the computer instructions executable to 
determine whether the application software is a trusted application; 

computer instructions stored in the memory, the computer instructions executable to 
identify the application software as a non-trusted application based upon the expiration date 
information. 

43 . (Withdrawn) The terminal unit of claim 40 fiirther comprising: 

computer instructions stored in the memory, the computer instructions executable to 
determine whether the security descriptive file is renewable based upon the updated 
authorization information received from the administration server; 

computer instructions stored in the memory, the computer instructions executable to 
request an updated security descriptive file from the administration server based upon an 
indication that the security descriptive file is renewable in the updated authorization 
information. 
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44. (Previously Presented) A method of distributing trusted software applications for use 
on terminal units deployed in a transmission system comprising: 

a terminal unit sending a request for receipt of an application descriptive file 
associated with an application software based upon a storage location in commtmication with 
the terminal unit via the transmission system; 

in response to receipt of the application descriptive file, the terminal unit extracting a 
storage location of the application software file from the application descriptive file, wherein 
the terminal is in communication with the storage location of the application software file via 
the transmission system. 

in further response to receipt of the application descriptive file, the terminal unit 
extracting a storage location of a security descriptive file firom the application descriptive 
file, wherein the security descriptive file is associated with the application software file, and 
wherein the terminal is in communication with the storage location of the application 
software file via the transmission system. 

the terminal unit transmitting a request for transmission of the security descriptive file 
to an administration server as a function of the storage location of the security descriptive file 
extracted from the application descriptive file; 

in response to reception of the security descriptive file, the terminal transmitting a 
request to receive the application software file based upon the storage location of the 
application software file included in the application descriptive file. 

45. (Previously Presented) The method of claim 44, wherein the storage location of the 
application software file is located on a server other than a server that corresponds to the 
storage location of the application descriptive file. 

46. (Previously Presented) The method of claim 44, wherein the security descriptive file 

includes authorization information for execution of the application software on a terminal 
unit, the terminal transmitting the request to receive the application software file based upon 
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the storage location of the application software file included in the application descriptive 
file comprising: 

the terminal determining whether the authorization information for execution of the 
application software is valid; and 

the terminal transmitting the request to receive the application software based upon 
determination that the authorization information for execution of the application software is 
valid. 

47. (Previously Presented) The method of claim 44, wherein the application descriptive 
file includes contents dependent upon the application software file, a storage location of the 
application software file, and a storage location of the security descriptive file. 

48. (Previously Presented) The method of claim 44, the terminal transmitting the request 
to receive the application software file based upon the storage location of the application 
software file included in the application descriptive file comprising: 

the terminal extracting a first application program identifier associated fi-om the 
application descriptive file; 

the terminal extracting a second application program identifier from the security 
descriptive file; 

the terminal determining whether the first application program identifier extracted 
fi-om the application descriptive file and second application program identifier match 
extracted from the second application program identifier; 

the terminal transmitting a request to receive the application program based upon 
determination that the first application identifier and second application program identifier 
match. 
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